SuSE Update for postfix SUSE-SA:2010:011

Check for the Version of postfix OpenVAS Vulnerability Test SuSE Update for postfix SUSE-SA:2010:011 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

openSUSE Security Update : postfix (postfix-1969)

The value of SMTPDLISTENREMOTE accidentally defaulted to 'yes'. The postfix smtp daemon therefore was reachable over the network by default. This update therefore resets the value to 'no' in /etc/sysconfig/mail. If you intentionally want postfix to listen for remote connection you need to manuall...

Microsoft Outlook 2002 Script Execution (CVE-2004-0121)

Microsoft provides server and client side implementations of email protocols such as SMTP, POP3 and IMAP. The widely used Microsoft Outlook product is an implementation of an email client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and...

CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL)

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | | |------------------------------------------------- EIP Hunters...

[SECURITY] [DSA 1985-1] New sendmail packages fix SSL certificate verification weakness

------------------------------------------------------------------------ Debian Security Advisory DSA-1985-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 31, 2010 http://www.debian.org/security/faq -...

Symantec Multiple Products VRTSweb Code Execution (CVE-2009-3027)

Symantec VERITAS Web Server VRTSweb is a shared component shipped with multiple Symantec products. VRTSweb is a Web Restore Server Component which can be used for managing Server SSL certificates, configuring SMTP notifications, managing communication ports, and other tasks. VRTSweb is developed...

Oracle Document Capture EasyMail SMTP AddAttachment Buffer Overflow

Oracle Document Capture is integrated with Oracle Imaging and Process Management and Oracle Universal Content Management products. Oracle Document Capture supplies document scanning and indexing capabilities. Both applications allow users to scan and import pages in batches into a document...

Mercury Mail Transport System SMTP AUTH CRAM-MD5 Buffer Overflow (CVE-2007-4440)

Mercury Mail Transport System is an email server suite for the Microsoft Windows platform and Novell NetWare file servers. The product supports various popular mail transfer protocols such as SMTP, POP3 and IMAP. The components of the Mercury Mail product are implemented with individual Dynamic...

Mandriva Update for sendmail MDVSA-2010:003 (sendmail)

Check for the Version of sendmail OpenVAS Vulnerability Test Mandriva Update for sendmail MDVSA-2010:003 sendmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Security Best Practice: Protect Yourself from Multiple SMTP Vulnerabilities

Simple Mail Transfer Protocol SMTP is an Internet standard for electronic mail e-mail transmission across Internet Protocol IP networks. SMTP is specified for outgoing mail transport and uses TCP port 25. There are several serious security limitations with the SMTP protocol that allow malicious...

Mandriva Update for sendmail MDVSA-2010:003 (sendmail)

Check for the Version of sendmail OpenVAS Vulnerability Test Mandriva Update for sendmail MDVSA-2010:003 sendmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[ MDVSA-2010:003 ] sendmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:003 http://www.mandriva.com/security/ Package : sendmail Date : January 11, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0, Multi Network Firewall 2.0 Problem Description...

Mandriva Update for fetchmail MDVA-2010:018 (fetchmail)

Check for the Version of fetchmail OpenVAS Vulnerability Test Mandriva Update for fetchmail MDVA-2010:018 fetchmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : sendmail (MDVSA-2010:003)

A security vulnerability has been identified and fixed in sendmail : sendmail before 8.14.4 does not properly handle a '\0' NUL character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server...

CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

CVE-2009-4565

CVE-2009-4565 affects sendmail up to version 8.14.3; the vulnerability arises from improper handling of a ‘\0’ character in the Common Name (CN) field of X.509 certificates. This flaw enables MITM spoofing of SSL-based SMTP servers via a crafted server certificate from a trusted CA and could allo...

CVE-2009-4565

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition

No description provided by source. !/usr/bin/env python Eureka Mail Client Remote Buffer Overflow Exploit XP SP3 English Egghunter Edition Coded By: [email protected] Found By: k4mr4n Securitylab.ir Member Tested On: Windows XPSP3 English Note: This script sets up a fake SMTP server Note: Set th...

Update Protection against Oracle Document Capture EasyMail SMTP AddAttachment Buffer Overflow

A stack buffer overflow vulnerability exists in Oracle Document Capture, which is integrated with Oracle Imaging and Process Management and Oracle Universal Content Management products. The vulnerability is due to a boundary error when parsing a crafted argument passed to the EasyMail SMTP Active...